$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: Z6ZqG1z/rnCdjYlBSvHa/MjRZ/AJ4bPpsgivyP3inQY= Subject key identifier: A5:80:7A:D4:2F:35:B1:97:9B:44:DC:E4:68:B5:4F:FC:A5:87:6B:F8 Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 0867 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 0857 Signing time: Sat 18 Oct 2025 21:49:30 +0000 Manifest this update: Sat 18 Oct 2025 21:49:28 +0000 Manifest next update: Sat 25 Oct 2025 21:49:28 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: 17VR2yY4BplnPmG9KFiBo0+IEh+OcjivJTVvmqbMYiw=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: IgMQ6bjceMEjNxtoYsUzqIdvcKKluE/pVcpXGCEMr1A=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2151 (0x867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Oct 18 21:49:28 2025 GMT Not After : Oct 25 21:49:28 2025 GMT Subject: CN=68f40b69-f0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ee:75:86:42:84:00:51:20:e1:77:79:f6:1a: 69:80:34:fc:7e:9c:9a:64:e6:2e:be:16:73:e0:a8: 47:a9:1b:76:34:14:72:90:c6:bd:64:45:cd:08:81: 61:db:be:f3:fe:9f:73:a7:3b:7c:56:70:d4:94:2d: 68:02:18:c2:a3:3c:96:b8:0b:fe:38:ad:8f:17:f2: fa:df:f3:a3:90:ff:7a:09:2f:82:47:a2:e5:97:df: 14:21:64:e5:52:4b:6a:31:f3:bd:83:5a:19:ea:dd: 54:2d:68:c8:2f:a0:d6:d2:9c:4e:06:f8:2a:90:11: e8:2c:83:b9:a8:5d:50:61:13:79:c4:45:d0:fa:97: 41:96:08:6b:64:8d:db:2b:57:95:2b:48:0a:fc:29: 4e:f9:7b:da:6a:4f:90:46:98:4a:d8:a5:18:8a:7e: 80:29:e6:d2:12:ee:8f:ac:6d:08:64:9c:69:98:a3: e7:66:f5:9a:d6:b9:fe:a4:ad:f6:ff:8e:8e:24:b5: 89:e8:3d:45:0d:6e:ca:c4:b9:78:c7:dd:89:0f:2b: d6:ca:40:11:7b:9a:66:fa:e7:1e:ed:3e:40:24:1d: eb:1e:6a:18:8a:7b:79:20:fd:d0:66:aa:1d:96:ae: ef:43:7f:3c:84:5d:8f:9a:68:c6:ca:a3:fe:65:e4: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:80:7A:D4:2F:35:B1:97:9B:44:DC:E4:68:B5:4F:FC:A5:87:6B:F8 X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:07:79:63:94:ac:12:a6:c6:cd:8c:58:2a:cd:4b:15:05:38: e7:68:4e:1f:9c:2f:36:96:aa:48:7e:1c:4b:51:11:11:02:7d: 53:76:03:3d:07:01:95:c0:50:ea:4d:cc:ab:56:a1:78:4a:6a: c3:eb:10:96:68:ba:41:20:ad:ae:21:9c:8f:7a:cc:59:7e:28: f6:b9:2f:1a:d1:b5:4e:b0:d4:19:f9:f0:2e:03:11:f2:58:b6: d1:b6:e5:e5:47:df:6f:10:00:05:8d:55:94:b7:1b:02:8c:41: 28:65:28:be:3e:57:31:d2:1a:43:2d:17:d9:c1:04:8a:bf:3f: 36:e3:71:78:4e:b7:e6:3e:a0:cc:83:9f:41:71:df:0b:9d:c7: 42:48:ef:39:3e:f7:33:8c:52:8e:69:26:66:42:4a:83:d2:c9: 7a:3d:30:b3:b1:d8:6e:8c:2b:59:44:88:3e:b8:a3:8d:33:91: ad:36:d7:61:49:0c:06:ce:ea:ac:e9:2d:90:d0:23:61:7e:1a: 18:ea:b2:95:a4:87:34:33:86:09:a5:73:cf:47:ba:7f:eb:46: 5c:37:99:91:a4:cc:3d:ae:cf:33:00:9d:99:d4:41:21:d6:61: 59:cd:85:18:84:19:e4:36:18:44:81:88:fe:7b:3a:8f:d1:68: ee:df:b9:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUxMDE4MjE0OTI4WhcNMjUxMDI1MjE0OTI4WjAYMRYwFAYD VQQDEw02OGY0MGI2OS1mMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApu51hkKEAFEg4Xd59hppgDT8fpyaZOYuvhZz4KhHqRt2NBRykMa9ZEXNCIFh 277z/p9zpzt8VnDUlC1oAhjCozyWuAv+OK2PF/L63/OjkP96CS+CR6Lll98UIWTl UktqMfO9g1oZ6t1ULWjIL6DW0pxOBvgqkBHoLIO5qF1QYRN5xEXQ+pdBlghrZI3b K1eVK0gK/ClO+Xvaak+QRphK2KUYin6AKebSEu6PrG0IZJxpmKPnZvWa1rn+pK32 /46OJLWJ6D1FDW7KxLl4x92JDyvWykARe5pm+uce7T5AJB3rHmoYint5IP3QZqod lq7vQ388hF2PmmjGyqP+ZeR2iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWAetQv NbGXm0Tc5Gi1T/ylh2v4MB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvB3ljlKwSpsbNjFgqzUsVBTjnaE4fnC82lqpIfhxLURERAn1TdgM9 BwGVwFDqTcyrVqF4SmrD6xCWaLpBIK2uIZyPesxZfij2uS8a0bVOsNQZ+fAuAxHy WLbRtuXlR99vEAAFjVWUtxsCjEEoZSi+Plcx0hpDLRfZwQSKvz8243F4TrfmPqDM g59Bcd8LncdCSO85PvczjFKOaSZmQkqD0sl6PTCzsdhujCtZRIg+uKONM5GtNtdh SQwGzuqs6S2Q0CNhfhoY6rKVpIc0M4YJpXPPR7p/60ZcN5mRpMw9rs8zAJ2Z1EEh 1mFZzYUYhBnkNhhEgYj+ezqP0Wju37nQ -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:12 2025 by rpki-client